1. Compsci 82, Fall 2009 13.1 Crime and Cybercrime l An act committed or omitted in violation of a law forbidding or commanding it and for which punishment is imposed upon conviction http://www.thefreedictionary.com/crime l Deviant behavior that violates prevailing norms --- cultural standards prescribing how humans ought to behave normally. http://en.wikipedia.org/wiki/Crime

2. Compsci 82, Fall 2009 13.2 Cybercrime l What is cyber-crime? Cyber-terrorism?  Hackers, Crackers, Warez, Malware, cyber- bullying, Blackhats, Whitehats, DDOS l Cyberespionage, Cyber-sleuthing, Cyberwar  Imagined, real, over- or under-hyped? l Hacktivism  Electronic civil disobedience? l Criminal? Ethical? Enjoyable?  Why is the FBI involved in cybercrime?

3. Compsci 82, Fall 2009 13.3 Examples of Cybercrime l Social engineering/hacking: Kevin Mitnick  Markoff, Shimomura, solitary confinement l SPAM: is this a crime? Why  McColo stopped, SPAM too! LA Times, 11/14/08 McColo stopped, SPAM too! SPAM down two-thirds to 60 billion, McCol depeered  http://tinyurl.com/5bnpte MindMap from Washington Post http://tinyurl.com/5bnpte l Fake FDIC Phishing Scam Fake FDIC Phishing Scam l Botnets, cyberwar, cyberespionage?  Is this really happening? Haxis of Evil?

4. Compsci 82, Fall 2009 13.4 Illegal, immoral, unethical l Is pornography against the law? Is it a crime? What about posting a syllabus from a course, e.g., coursehero and other sites?  Other kinds of cyber activity/crime?  http://www.cybercrime.gov/ http://www.cybercrime.gov/  DOJ Kids and Internet Ethics DOJ Kids and Internet Ethics l Is sending SPAM against the law?  ftc CAN-SPAM ftc CAN-SPAM

5. Compsci 82, Fall 2009 13.5 SPAM, Botnets, Making Money l Orignal SPAM skit Orignal SPAM skit l Ordering toast instead of SPAM Ordering toast instead of SPAM

6. Compsci 82, Fall 2009 13.6 From worms to virii to botnets l How do computers get “infected”?  Is the terminology warranted?  Trojan horse, attachment, host  Virus travels without human intervention l When did this start? Personalities? Deeds?  Is there punishment? Too much/little?

7. Compsci 82, Fall 2009 13.7 Robert Tappan Morris l First Internet Worm  Worm v Virus? l Valedictorian  Delbarton, 1983 l Computer Fraud/Abuse  1990, probation+$10K l Sold Viaweb to Yahoo for $48M in 1998 l Professor at MIT l Father was Chief Scientist at NSA

8. Compsci 82, Fall 2009 13.8 DDOS: what and how l Distributed Denial Of Service  Terms? Mechanism l Misuse/abuse IP  SYN, Ping, Smurf l Why do botnets help in this regard? l IP addresses spoofed in SYN/Ping, why? l Defensive measures against DDOS?

9. Compsci 82, Fall 2009 13.9 Reporting on Botnets l BBC buys a botnet! BBC buys a botnet! l Aside from the legality of the scheme, the exercise raises troubling ethical questions. Security firms are almost unanimous in saying the behaviour of infected machines could have been illustrated without hacking into the machines of innocent victims

10. Compsci 82, Fall 2009 13.10 Srizbi stopped! We have observed that when a bot is unable to contact its hard coded control server, it will try to resolve the IP address of up to four domains. In our lab we have seen that a bot will then contact the server with this IP address and request a new template. Once a template is received it will begin spamming again: gyprtwqy.com, faruoeqa.com, dqdpdrqq.com, syudwtqy.com http://www.marshal.com/trace/traceitem.asp?article=816 l Why did this go on for so long?

11. Compsci 82, Fall 2009 13.11 Crime or FUD? l “If it has compromised your machine once, it will do it again. We've seen evidence" of this, says Roel Schouwenberg, senior virus researcher for Kaspersky Lab, (discovered this new wave of Web attacks late last week.) l SQL injection attacks, which appear to originate from China, appear to have peaked yesterday, according to Kaspersky. Among the infected sites found by Kaspersky were Travelocity.com, countyofventura.org, and missouri.edu. http://ba.darkreading.com/security/attacks/showArticle.jhtml?articleID=212001872

12. Compsci 82, Fall 2009 13.12 Dark Reading continued l Dan Hubbard, CTO at Websense, says the payloads vary, but many attacks appear designed to grab World of Warcraft credentials. "They do appear to have other capabilities, however, that allow them to update, disable AV, and...install more generic password stealers that could be used for a plethora of things.” l Is stealing a WoW password like hacking your Wachovia account?

13. Compsci 82, Fall 2009 13.13 Cybercrime or Cybersomethingelse? l YouTube Mitnick YouTube Mitnick  Kevin Mitnick on 60 minutes l YouTube on Cybercrime toolkit YouTube on Cybercrime toolkit  What’s right/wrong with this CBC video? l YouTube, new face of cybercrime? YouTube, new face of cybercrime?  The new “face” of cybercrime l Hackers trailer Hackers trailer l See links at class links to cybercrimeclass links to cybercrime

14. Compsci 82, Fall 2009 13.14 Spamalytics: Stefan Savage et al l …the only obvious way to extract this data is to build an e-commerce site, market it via spam, and then record the number of sales. Moreover, to capture the spammer’s experience with full fidelity such a study must also mimic their use of illicit botnets for distributing e-mail and proxying user responses.

15. Compsci 82, Fall 2009 13.15 Spamalytics: Stefan Savage et al l In effect, the best way to measure spam is to be a spammer. In this paper, we have effectively conducted this study, though sidestepping the obvious legal and ethical problems associated with sending spam. Critically, our study makes use of an existing spamming botnet. l National security threats by Internet Criminals

16. Compsci 82, Fall 2009 13.16 Phishing l What is phishing, how does it work, origins  Email and Web phishing attacks  Certificate Authorities: site really is!  User-interface and Human Factors issues  Tips on avoid being hooked l There is a banking and financial crisis  Why is this a boon to phishing expeditions? l Is this good advice? http://tinyurl.com/5dlr63 http://tinyurl.com/5dlr63

17. Compsci 82, Fall 2009 13.17 From Phishing to Whaling l http://www.nytimes.com/2008/04/16/technology/16whale.html?fta=y http://www.nytimes.com/2008/04/16/technology/16whale.html?fta=y l http://www.antiphishing.org/reports/APWG_CrimewareReport.pdf http://www.antiphishing.org/reports/APWG_CrimewareReport.pdf